cookie-session

import express from 'express'; import cookieSession from 'cookie-session'; const app = express(); // Ensure you provide at least one strong secret key. // In production, these should be loaded from environment variables. const SESSION_SECRET_KEYS = process.env.SESSION_SECRET_KEYS ? process.env.SESSION_SECRET_KEYS.split(',') : ['supersecretkey1', 'anothersupersecretkey2']; app.use(cookieSession({ name: 'session', keys: SESSION_SECRET_KEYS, maxAge: 24 * 60 * 60 * 1000, // 24 hours httpOnly: true, // Recommended for security secure: process.env.NODE_ENV === 'production', // Use secure cookies in production sameSite: 'lax' // Recommended for security })); app.get('/', (req, res) => { // Access and modify session data via req.session req.session.views = (req.session.views || 0) + 1; res.send(`Hello! You've viewed this page ${req.session.views} times. Session ID: ${req.session.id || 'N/A'}`); }); app.get('/login', (req, res) => { req.session.user = { id: 1, name: 'John Doe' }; req.session.loggedInAt = Date.now(); res.redirect('/'); }); app.get('/logout', (req, res) => { req.session = null; // Clears the session cookie res.redirect('/'); }); const PORT = process.env.PORT || 3000; app.listen(PORT, () => { console.log(`Server running on http://localhost:${PORT}`); console.log('Try visiting / and then /login and /logout'); });